Method for securely distributing software components on a computer network

• US 20020138757A1
• Filed: 03/23/2001
• Published: 09/26/2002
• Est. Priority Date: 03/23/2001
• Status: Abandoned Application

• Current Assignee: Motorola Mobility, Inc. (Lenovo Group Ltd.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Lynn, James T., Shaneyfelt, Todd C., Smith, Michael T., Greenwood, James E. Jr.
• Application Number:
  US09/814,601
• Publication Number:
  US 20020138757A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A method for securely transmitting information from a network appliance is disclosed. The method includes initially executing a secure kernel and a configuration file containing a load file onto the network appliance. The secure kernel is used to verify the authenticity of the configuration file and a load table within the configuration file.

Claims

1. A method for securely distributing a component from a network host to a network appliance, comprising the steps of:

signing, by said network host, a configuration file including a load table which defines a plurality of authorized components for said network appliance;

executing a secure kernel and said signed configuration file on said network appliance, said secure kernel including computer code for checking the authenticity of said configuration file;

verifying, by said secure kernel, the authenticity of said configuration file;

reading, by said secure kernel, said load table only after said verifying step; and

loading said plurality of authorized components onto said network appliance.

2. The method of claim 1, wherein said loading step comprises loading an operating system.

3. The method of claim 1, wherein said loading step comprises loading a computer software application.

4. The method of claim 1, wherein said loading step comprises loading services.

5. The method of claim 1, further comprising the steps of:

generating, by said host, an updated configuration file;

signing, by said host, said updated configuration file;

transmitting said signed updated configuration file from said host to said network appliance;

verifying, by said secure kernel, the authenticity of said updated configuration file; and

thereafter reading, by said secure kernel, said updated configuration file.